CVE-2018-10538

Name of the Vulnerable Software and Affected Versions: WavPack versions 5.1.0 and earlier

Description: An issue was discovered related to out-of-bounds writes due to insufficient validation of unknown chunk sizes in WAV input. This occurs because of a lack of integer-overflow protection within a bytes to copy calculation and subsequent malloc call, leading to insufficient memory allocation.

Recommendations: For WavPack versions 5.1.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.